Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa
File:                     3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          lLRFmWYloEeKAiAgzgtzZEL7KN1kfCnY0vnSXIF+f6k=
Subject key identifier:   F2:96:43:B6:ED:12:61:FB:35:BB:80:53:34:96:29:63:63:48:23:D6
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       75E17BF55964B16EFF426E5D3BB0CFE251B00079
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 05 Dec 2023 02:44:21 +0000
ROA not before:           Tue 05 Dec 2023 02:39:21 +0000
ROA not after:            Tue 03 Dec 2024 02:44:21 +0000
asID:                     138995
IP address blocks:        103.208.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Apr 2024 10:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e1:7b:f5:59:64:b1:6e:ff:42:6e:5d:3b:b0:cf:e2:51:b0:00:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Dec  5 02:39:21 2023 GMT
            Not After : Dec  3 02:44:21 2024 GMT
        Subject: CN=F29643B6ED1261FB35BB805334962963634823D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:44:49:c0:c9:2f:eb:10:b9:34:0f:e2:f8:
                    38:9f:a6:26:61:0b:9f:e3:51:e6:de:1f:ba:07:65:
                    bf:87:1a:4f:c0:a6:89:16:87:f3:be:23:4a:d5:41:
                    dd:1d:27:55:3f:81:94:ad:fe:fb:52:91:95:f2:78:
                    43:00:12:02:a0:e0:eb:c8:dc:8a:d3:fa:26:df:32:
                    57:2e:c6:24:4b:e0:da:c6:7d:26:90:9c:83:bf:11:
                    a4:e9:c4:6f:f4:d9:4a:ea:e2:fe:2e:5f:8d:86:d4:
                    2f:42:83:59:19:dd:c6:41:58:d7:30:fa:70:35:95:
                    e3:f3:0f:ef:c8:7a:34:c4:7b:cc:e2:c3:b6:20:fa:
                    73:5e:b1:db:b2:f6:87:ba:d3:31:89:c8:1c:27:7c:
                    46:6a:5d:c9:4d:4e:6d:4b:7e:f8:4f:6b:fa:ef:7d:
                    e8:17:80:43:e3:08:0b:ca:c5:6f:91:e1:2c:b4:98:
                    49:20:c5:86:22:f1:6e:ce:f7:64:f0:4d:87:7e:08:
                    e6:2b:eb:f1:4c:a5:23:32:3c:2f:b7:77:62:b1:f7:
                    42:b2:0d:cd:89:cb:d4:6d:90:19:55:e2:b8:0d:f5:
                    88:ff:2a:db:4f:8e:f9:2c:53:ca:42:ca:6f:6b:74:
                    ce:1e:13:6e:41:1f:a9:e1:fa:a1:d3:dd:9a:8d:b1:
                    4b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:96:43:B6:ED:12:61:FB:35:BB:80:53:34:96:29:63:63:48:23:D6
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a9:a3:62:3f:20:78:51:1b:75:63:9c:f7:cb:a3:80:82:59:
         39:f3:75:3a:de:7e:32:cc:d4:73:bd:eb:38:7b:9b:7d:04:84:
         dc:b5:e6:00:1e:3e:26:0f:71:9c:76:c3:ff:c2:85:d7:46:0e:
         9a:e3:e8:af:2f:8e:5f:7b:90:59:bf:e2:0f:d6:46:46:60:15:
         00:90:b3:a9:8e:ea:d8:0e:7d:7a:7b:43:61:3a:18:bc:b9:75:
         be:7b:b3:b3:61:9a:78:97:f0:48:38:75:f0:63:a0:23:34:c2:
         e4:c7:42:b9:f2:df:9f:ca:7e:6a:61:fe:55:e8:44:b2:fc:91:
         c4:09:69:d1:3a:eb:f6:27:bb:b3:b0:fd:a3:30:11:59:06:13:
         32:bb:0e:94:0d:25:d8:e5:60:d4:b8:aa:64:05:d8:b5:8f:68:
         7b:7d:99:d7:3e:a2:f6:e8:fb:95:57:ac:b9:d2:ea:55:c4:95:
         48:e2:96:82:03:2e:73:a5:d4:25:0d:52:a8:00:91:5c:9c:c0:
         63:09:55:5f:88:db:37:ed:78:91:80:22:c3:f0:3f:91:ec:c2:
         ea:d0:d9:1c:a1:22:7d:27:ae:fb:47:b2:e1:48:7c:a4:94:3e:
         9b:7d:f0:18:6d:8f:21:28:4c:65:4b:e7:b2:af:9b:32:66:d6:
         c9:ec:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 08:43:41 2024 by rpki-client on console-ams.rpki-client.org